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Amendment to the Claims 

Please amend the claims as follows: 

1. (Cunently amended) A method for coofiguriog a semiconductor chip bava^cm 
a330oigiod"S<^Ql num ber, the method comprising: 

selecting a private cryptographic key; 

selecting a public cryptographic key, wherein the public cryptogra|)hic key and 
the private cryptographic key are not related by a oryptogmpbic public/private key pair 
lelationsbip; mi 

embedding the private cryptogr^ibic key? and_the public cryptographic keyr»d 
fee H scrial number in a read-only memory on the semiconductor chipian^ 

storing a second public cryptographic key associated with the priv^ 
crvptpgraphic key exclosively outside the semiconductor chip , 

2. (Original) The method of claim 1 wherein the semiconductor chip provides 
interfece processing at a client. 

3. (Cancelled) 

4. (Currently amended) The method of claim 1 fimbcr comprising: 

storing the public cryptographic key in a dambase in association with Ae-a.serial 
numbe r associated with the semiconductor chip , 

5. (Original) The method of claim 1 v^iierein the private cryptographic key, and the 
public cryptographic key in the read-only memory are inaccessible to an input/output connection 
of the semiconductor chip. 



PA(2 7/29 ^ RCVD AT 511 W 5:15:32 [Eastern Daylight te^ 



blAy-15-D6 03:20PM FROVhCLG FAX 



+18479057113 



T-378 P. 08/29 F-922 



May 15, 2006 

Case No. AUS920010088USJ (9000/108) 
Serial No, 09/833,342 
Filedi April 12, 2001 
Page 4 of 25 

6, (Cuirently oraendea) An aruck of roanxrfaciure coraprismg: 

a first T«ad-only memoiy structure containing an embedded private cryptographic 
key , The embedded private cryptographic key beinp associated with a stored p ublic crvptopraphic 
key stored exclusivelv outside the first read-only m emory stnicniie; and 

a second read-only memory structure containing an embedded pubtic 
cryptographic key, wherein the embedded public cryptographic key and the embcfided private 
cryptographic key are not related by a- oryptographio public/private key pair relanpnship. 

7, (Original) The article ofmanufactureofclaim 6 Therein the article of 
manu&cture is a semiconductor chip* 

8, (Original) The article of manu&cture of claim 7 wherein the sezniponductor chip 
is capable of providing inter&ce processing at a client. 

9, (Ori^nal) The article of manufacture of claim 8 wberein the first read-only 
memory structure and the second read-only memory structure are coniained within a 
cryptogr^hic unit of a CPU chip. 

1 0, (Cuiieatly amended) A method for secure commimication beiwee^i a client and a 
server in a data processing system, the method compriang: 

generating a client message at the client; 

retrieving an embedded server public key from a read-only memory strucmre in 
an article of manufacture in the client, the read-only memory structure having an embedded 
client priva:te key, the embedded server public key and the embedded client private key not being 
related by a oryptographio public/private key pair relarionsbip, the embedded cli«it private k^y 
being associated with a cUertt public key stored exclusively outside the client; 
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encrypting the client message with the embedded server public key; and 
sending the client message to the server. 

1 1 . (Previously presented) The method of claim 1 0 fiarther comprising: 
retrieving client autbentic4tion data; 

retrieving the embedded client private key from a read-only memory structure in 
an article of manufacture in the client; 

encrypting the client authentication data with the embedded client private key; 

and 

storing the encrypted cliem authentication data in the client message. 

12. (Original) The method of claim 1 1 further comprising: 

retrieving an embedded client serial number from a read-only m^ory structure in 
an article of manu&cnire in the client; and 

storing a copy of the embedded client serial number in the cliem message. 

13. (Currently amended) An ^ipaiatus for secure communication between a client 
and a server in a data processing system, the ^paratus comprising: 

means for generating a cliem message at the client; 

means for retrieving an embedded server jHiblic key from a read-oply memory 
smtcture in an article of manufacture in the client, the read-only mcrac^ structure having an 
embedded client private key, the embedded server public key and the embedded client private 
key not being related by a cryptogrop tee public/private key pair relationship, the embedded cliem 
private key being associated with a client public key stored exclusively outside the client; 
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means for encryptmg the client message with the embedded server public key; 

and 

means for sending the client message to the server. 

14. (Previously presented) The ^paratus of claim 13 further comprising: 
means for retrieving client authentication data; 

means for retrieving the embedded client private key &om a read-only memory 
structure in an article of mano&cture in the client; 

means for encrypting the client authentication data with the embedded client 
private key; and 

means for storing the encrypted client authentication data in the client message. 

15- C^ginal) The apparatus of claim 14 fimber comprising: 

means for retrieving an embedded client serial number &om a read-only memoxy 
structure in an article of manuf^rture in the client; and 

means for storing a copy of the embedded client serial number in client 

message, 

16. (Currently amended) A completer program prodxict in a computer-readable 
medium for use in a data processing system for secure communication between a cUent and a 
server, the computer program product comprising: 

instructions for generadng a client message at the client; 

instructions for retrieving an embedded server public key from a rfad-only 
memory smicture in an article of manufacture in the client, the readonly memory structure 
having an embedded client private key, the embedded server public key and the embedded chent 
private key not being related by a c s ryptogniphio public/private key pair relationship, the 
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embedded client private key being associated with a client public key stored exclusively outside 
the client; 

instructions for encrypting the client message with the embedded server public 
key; and instructions for sending the cU^t message to the server. 



1 7. (Previously presented) The computer program product of claim 1 6 further 
comprising: 

insonctions for retrieving client authenticatipn data; 

instructions for retrieving the embedded client private key from a read-only 
memory structure in an article of mantrfiacture in the client; 

instructions for encrypting the client aitthentication data with the epibedded client 
private key; and 

instructions for storing the encrypted client authentication data in the client 

message, 

1 8. (Original) The computer program product of claim 1 7 further con^xising: 
instructions for retrieving an embedded client serial number from a read-only 

n^mory structure in an article of manufacture in ihe client; and 

instructicms for storing a copy of the embedded client serial number in the client 

message. 

1 9. (Previot*sIy presented) A method for secure communication between a client and 
a server in a data pirtcessing system^ the method comprising: 

generating a server message at the server; 

retrieving information that was requested by tiie client; 

storing the retrieved information in the server message; 
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retrievmg a client public key, wherein the client public key coiresfpouds to an 
embedded client private key in a read-only memory structure in an ajticle of manu&cmre in the 
client, and the client public key is stored exclusively outside tbe client; 

encrypting the server message with the client public key; and 

sending the server message to the cliait- 

20. (Previously presented) The method of claim 19 further comprising: 
retrieving server authentication data; 

retrieving a server private key; 

encrypting the server authenticarion data with the server private key; and 
staring the eiurrypted server authentication data in the server message. 

21. (Previously presented) An ^paratus for secure communication between a client 
and a stiver in a data processing system, the apparatus comprising: 

means for generating a server message at the server; 

means for retrieving information xim was requested by the client; 

means for storing the retrieved information in the server message; 

means for retrieving a client public key, wiierein the clieut public key corresponds 
to an embedded client private key in a read-only memory structure in an article of manufacture in 
the client, and the client public key is stored exclusively outside the client; 

means for encrypting the server message with the client public key; and 

means for sending the serv^ message to the client 

22. (Original) The apparatus of claim 2 1 further comprising: 
means for retrieving server authentication data; 

means for retrieving a server private key; 
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means for eixciypting the server aulbentication data with the server private key; 

and 

naeans for storing the encrypted server autbenticarion data in the server message. 

23, (Previously presented) A computer program product in a computer-readable 
medium for use in a data processing system for secure commumcatioo between a client and a 
server, the computer program product comprising: 

instructions for generatijig a server message at the server; 

instructions for retrieving information that was requested by the client; 

instructions for storing the retrieved information in the server message; 

instructions for retrieving a client public key, wherein the client pi^blic key 
corresponds to an embedded client privaie key in a read-oxily memory structure iij an article of 
manufacture in the client, and the client public key is stored exclusively outside the client; 

instructions for encrypting the server message with the client public key; and 

insmictions for sending the server message to the client. 

24, (Original) The computerprogmmproductofclaim 23 further confprising: 
instructions for retrieving server authentication data; 

instructions for retrieving a server privaie key; 

insmiciions for encrypting the server authentication data with the $eTver private 

key; and 

instructions for storing the encrypted server ambenticaiion data in the server 

message. 

25, (Currently amended) A method for secure commimicaiion between a client and a 
server in a data processing system, the tuethod comprising: 

receiving a client message from the client; 
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retrieving a server private key; 

decrypting the client message with the server private key; 
retrieving a client serial ntjmber from the decrypted client message; and 
retrieving a client public key that is associatively stored wiib the retrieved client 
serial number, wherein the client public key conesponds to an embedded cliem private key in a 
read-only memory structure in an article of manufacture in the cliem and is store4 exclusively 
outside the client; 

>%1ierein the read-only memory stnictuie has an embedded server public key, the 
embedded server public key and the embedded client private key not teing related by a 
cryptogrc^Q public/private key pair relationship. 

26, (Original) The method of claim 25 further comprising: 

retrieving encrypted cUent authentication data fiom the cUent message; 
decrypting the client authentication data with the retrieved client public key; and 
verifying the decrypted client ai4thentication data- 

27. (Currently amended) An apparatus for secure coxiununication between a client 
and a server in a data processing system, the apparatus comprising: 

means for receiving a client message fiom the client; 
means for retrievii^ a SCTver private key; 

means for decrypting the client message with the server private key; 
means for retrieving a client serial number fiom the decrypted client message; and 
mearjs for retrieving a client public key tban is associatively stored with the 
retrieved client serial number, wherein the client public key corresponds to an embedded cliem 
private key in a read-only memory structure in an article of manu&cture in the client and is 
stored exclusively outside the client; 
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wbfijem tbfi read-only memory strucmre has aa embedded server public key, the 
embedded server public key and the embedded diem private key myt being related by a 
i u ypio g i uplu u public/privaie key pair relationship. 

28. (Origioal) The apparams of claim 27 further comprising; 

means for retrieving encrypted client amhentication data from the cUem message; 
means for decrypting the client authentication data with the retrieved client public 

key; and 

means for verifying the decrypted client authentication data- 

29. (Currently amended) A computer program product in a computer-readable 
medium for use in a data processing system for secure communicadon between a client and a 
sCTver, the computer program product comprising: 

instructiotis for receiving a client message fiom the client; 
instructiMs for rettieving a server private key; 

instructions for decrypting the client message with the server priv^ key; 
instructions for retrieving a client serial number from the decrypted cliem 

message; and 

instructions for retrieving a cUent public key that is associatively stored with the 
retrieved client serial number, wh^ein the cliem public key corresponds to an envbedded client 
private key in a read-only memory structure in an article of manufacture in the cU^ and is 
stared exclusively outside the client; 

vs^rein the read-only memory structure has an embedded server public key, the 
embedded server public key and the embedded client private key noi being related by a 
Gtyptogn^ ie public/private key pair relationship. 
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30. (Original) The compiler program prodm of claim 29 furrber cc^ 
instructions for retrieving encrypted client amhentication data from the client 

message; 

instructions for decrypting the client authentication data with the retrieved client 
public key; and 

insmictions for verifying the decrypted client authentication data. 

3 1 . (Previously presented) A method for secure communication between a client and 
a server in a data processing system* the method comprising: 

receiving a server message from the server; 

retrieving an embedded client private key from a read-only memory structure in 
an article of manufecture in the client, the embedded client private key being associaied with a 
client public key stored exclusively outside the client; and 

decrypting the server message with The embedded client private key. 

32. (Original) The method of claim 31 further comprising: 

retrieving encrypted server authentication data from the server message; 
rtnrieving an embedded server public key from a read-only memory structure in an article 
of manufacture in die client; and 

decrypting the server authentication data with the embalded server public key; 

and 

verifying the decrypted server authentication data. 

33. (Ori^nal) The method ofclaim 32 further comprising: 
reuievxng requested information from the server message; and 

in response to a determination that the decrypted server amhraticapicHi data was 
verified, processing the requested information. 
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34. (Previously presented) An apparatus for secwe comimmication between a client 
and a server in a data processing system, the apparatus comprising: 

meaos for receiving a server message firom the server; 

means for retrieving an embedded client private key from a read-oidy memory 
structure in an article of manufecture in the client, the embedded client private key being 
associated with a client public key stored exclusively oi^ide the client; and 

means for decrypting the server message with the embedded client private key. 

35. (Original) The apparatus of claim 34 further comprising: 

means for retrieving encrypted server authentication data from the server 

message; 

means for retrieving an embedded server public key from a read-only memory 
structure in an amcle of manufacture in the client; and 

means for decrypting the server authentication data with the embedded server 
public key; and 

means for verifying the decrypted server authenticaiion data- 

36. (Original) The apparatus of claim 35 further comprising: 

means for retrieving requested information from the server message; aiKi 
means for processij^ the requested information in response to a determination 
that the decrypted server authentication data was verified. 
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37. (Previously presented) A copiputer program product in a compmer-readable 
medium for use in a data processing system for secure co mmuni cation between a diem and a 
server, the computer program product comprising: 

insmicuons for receiving a server message &om the server, 
instructions for remeving an embedded client private key from a read-only 
memory struciuie in an article of manufacture in the client the embedded client private key 
being associated with a client public key stored exclu^vdy outside the client; and 

instructions for decrypting the server message with the embedded diem private 

key. 

38. (Original) The computer program product of claim 37 fUrthercoinprising: 
instrucdons for retrieving encrypted server amheniication data from the server 

message; 

instructions for retrieving an embedded server public key fiam a read-only 
memory structure in an article of manuf5w:ture in the client; and 

instructions for decrypting the server authentication data with the embedded 
server public key; and 

instructions for verifying the decrypted s«ver autbenncation data. 

39. (Original) The computer program product ofclaim 38 further corijprising: 
mstructions for retrieving requested information fiom the server message; and 
instructions for processing the requested information in respcmse to a 

determination that the decrypted server authentication data was verified. 

40. (New) The method of claim 1 \%lierein the embedding step fimhei: comprises the 
embedding of a serial number associated with the semiconductor chip. 
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